mediawiki vulnerabilities (Debian)
300 vulnerabilities.
mediawikiDebianCross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php...4.3 MediummediawikiDebianMediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests,...5.0 MediummediawikiDebianMediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages...5.0 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or...4.3 MediummediawikiDebianThe transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges,...3.5 LowmediawikiDebianThe checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3...5.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when...2.6 LowmediawikiDebianapi.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to...4.3 MediummediawikiDebianMediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers...5.8 MediummediawikiDebianCross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1...6.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16...4.3 MediummediawikiDebianMediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly...6.0 MediummediawikiDebianthumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as...4.3 MediummediawikiDebianMediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites...5.0 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the Special:Block implementation in the...4.3 MediummediawikiDebianMultiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php)...2.6 LowmediawikiDebianmediawiki - cross-site scriptingNo scoremediawikiDebianMediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is...4.3 MediummediawikiDebianMediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download...5.0 MediummediawikiDebianCross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0...5.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1...3.5 LowmediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions...4.3 MediummediawikiDebianUnspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain...5.0 MediummediawikiDebianCross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x...6.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x...6.8 MediummediawikiDebianMediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct...5.0 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before...5.1 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote...4.3 MediummediawikiDebianUnspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5...5.0 MediummediawikiDebianMediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote...4.3 MediummediawikiDebianIncomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain...4.3 MediummediawikiDebianUnspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3...5.0 MediummediawikiDebianMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to...4.3 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy (...4.3 MediummediawikiDebianDirectory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1...5.0 MediummediawikiDebianMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta...4.3 MediummediawikiDebianCross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta...7.5 HighmediawikiDebianUnknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has...5.0 MediummediawikiDebianSQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL...7.5 HighmediawikiDebianMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to...6.8 MediummediawikiDebianCross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and...4.3 MediummediawikiDebianMediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with...7.5 High